Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home Symantec 250-438

Symantec 250-438 Exam Practice Questions (P. 1)

  • Full Access (70 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #1
How should a DLP administrator change a policy so that it retains the original file when an endpoint incident has detected a `copy to USB device` operation?
  1. A
    Add a ג€Limit Incident Data Retentionג€ response rule with ג€Retain Original Messageג€ option selected.
  2. B
    Modify the agent config.db to include the file
  3. C
    Modify the ג€Endpoint_Retain_Files.intג€ setting in the Endpoint server configuration
  4. D
    Modify the agent configuration and select the option ג€Retain Original Filesג€

Correct Answer:
A

Question #2
What is the correct configuration for `BoxMonitor.Channels` that will allow the server to start as a Network Monitor server?
  1. A
    Packet Capture, Span Port
  2. B
    Packet Capture, Network Tap
  3. C
    Packet Capture, Copy Rule
  4. D
    Packet capture, Network Monitor

Correct Answer:
C
Reference:
https://support.symantec.com/en_US/article.TECH218980.html

Question #3
Under the `System Overview` in the Enforce management console, the status of a Network Monitor detection server is shown as `Running Selected.` The Network
Monitor server's event logs indicate that the packet capture and filereader processes are crashing.
What is a possible cause for the Network Monitor server being in this state?
  1. A
    There is insufficient disk space on the Network Monitor server.
  2. B
    The Network Monitor server's certificate is corrupt or missing.
  3. C
    The Network Monitor server's license file has expired.
  4. D
    The Enforce and Network Monitor servers are running different versions of DLP.

Correct Answer:
D

Question #4
Which two Infrastructure-as-a-Service providers are supported for hosting Cloud Prevent for Office 365? (Choose two.)
  1. A
    Any customer-hosted private cloud
  2. B
    Amazon Web Services
  3. C
    AT&T
  4. D
    Verizon
  5. E
    Rackspace

Correct Answer:
BE
Reference:
https://symwisedownload.symantec.com//resources/sites/SYMWISE/content/live/DOCUMENTATION/8000/DOC8244/en_US/
Symantec_DLP_15.0_Cloud_Prevent_O365.pdf?__gda__=1554430310_584ffada3918e15ced8b6483a2bfb6fb
(14)

Question #5
A DLP administrator has enabled and successfully tested custom attribute lookups for incident data based on the Active Directory LDAP plugin. The Chief
Information Security Officer (CISO) has attempted to generate a User Risk Summary report, but the report is empty. The DLP administrator confirms the Cisco's role has the `User Reporting` privilege enabled, but User Risk reporting is still not working.
What is the probable reason that the User Risk Summary report is blank?
  1. A
    Only DLP administrators are permitted to access and view data for high risk users.
  2. B
    The Enforce server has insufficient permissions for importing user attributes.
  3. C
    User attribute data must be configured separately from incident data attributes.
  4. D
    User attributes have been incorrectly mapped to Active Directory accounts.

Correct Answer:
D

Next Questions

All Pages